General
- Target 2026-07-20_1747f4658b0c513467805bf3ac4da5dc_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample260720-d176sagx3t
- SHA256 0b28eb4eb5b7697e7cb65845121089fea8e2c96a598ea5cc6647fc14d44626f6
- MD5 1747f4658b0c513467805bf3ac4da5dc
- SHA1 681fce42b84f1236395a4e7479a77fcb03376009
- SHA512 49ac9150139321525ace1ce697603b9dc5cb47d039f6fc4fef2aa94dc6264e8396e2539873eed0ad070be9cd6d4a7273a4dae7a380e8ab95c0ac92138bdaa0d7
- SSDEEP 98304:30nAAYEppnGhju1MbQ9yDAD7KjjqkusjmqMhi:kNnnqu1tIDewjqkjiqMo
- TLSH T1C5867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1747f4658b0c513467805bf3ac4da5dc_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1747f4658b0c513467805bf3ac4da5dc_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 0b28eb4eb5b7697e7cb65845121089fea8e2c96a598ea5cc6647fc14d44626f6
- MD5 1747f4658b0c513467805bf3ac4da5dc
- SHA1 681fce42b84f1236395a4e7479a77fcb03376009
- SHA512 49ac9150139321525ace1ce697603b9dc5cb47d039f6fc4fef2aa94dc6264e8396e2539873eed0ad070be9cd6d4a7273a4dae7a380e8ab95c0ac92138bdaa0d7
- SSDEEP 98304:30nAAYEppnGhju1MbQ9yDAD7KjjqkusjmqMhi:kNnnqu1tIDewjqkjiqMo
- TLSH T1C5867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE